Posts

Showing posts from 2011

LM hashes in Windows 2008 or above

Windows 2008 or above disables to store LM hashes in SAM. They can't be retrieved using password dumper programs. To enable this feature, set "Network security: Do not store LAN Manager hash" to "Disabled" under Local Policies → Security. Optionally, adjust "Network security: LAN Manager authentication level" to accept and/or send LM in addition to NTLM. (Note that this is very insecure and must be reverted after tests.) and please note that enabling via Group Policy applies only after setting a new password, you can't change the existing password to a weak one. ref:  http://hi.baidu.com/51cmdshell/blog/item/fe9271eb41ed87dad539c932.html ref:  http://superuser.com/questions/340208/enabling-lm-hash-in-windows-7 Password dumpers ref:  http://www.tarasco.org/security/pwdump_7/ ref:  http://www.foofus.net/~fizzgig/pwdump/

Save Settings for TeamViewer Portable

Work with TeamViewer.ini situated in \TeamViewerPortable\App\teamviewer folder. Setting nosave=0 will save your settings, but in the registry, and that doesn`t make it portable. The thing to do is importsettings=1 wich activate the automatic settings import. TeamViewer Portable will import the settings from a file called tv.ini which has to be situated in the same directory as your TeamViewer.exe. You can create the tv.ini by exporting your settings in the advanced options of the full TeamViewer version (Extras > Options > Advanced > Show advanced options > Export settings for TeamViewer Portable). This works in the oficial portable release from TeamViewer.com. In the PortableApps.com release, tv.ini must be situated in \TeamViewerPortable\App\teamviewer folder. Also, by setting LogOutgoingConnections=1 in the TeamViewer.ini file you can force TeamViewer to write a log file with detailed information about your connections. This log file is used by the TV Manager...

Windows 7 / Windows Search 4 does NOT support UNC network location indexing

WDS v3 gets the support, but Microsoft has disabled the support of UNC indexing in WDS v4, even the Windows Search in Windows 7. There're a lot of discussion about how to overcome this step-down functionality ( http://social.technet.microsoft.com/Forums/en-US/w7itpronetworking/thread/afb904c1-1c61-4aae-b6b1-5cf525b9f8de/ ). There is a simple way. Go to  http://www.microsoft.com/download/en/details.aspx?DisplayLang=en&id=3383  to download a patch called UNCFATPHInstaller.msi . Although the KB states that the patch works only for Windows Server 2003, Windows Vista and Windows XP, it actually does work for Windows 7. After patching, the WDS v4 will recognize OTFS protocol handler, as seen in HKEY_CLASSES_ROOT. You could now specify indexing location in Group Policy, which format stated in ( http://technet.microsoft.com/en-us/library/cc732491(WS.10).aspx ) Please noted that the patch only supports 32 bit. Ref:  http://robsprotips.blogspot.com/2010/06/search-ne...

Access Denied When Connecting to Administrative Shares in Windows 7

To remote access administrative shares in windows 7 by a target local administrator with a correct password, no matter specifying target computer name in the login credential dialog, will fail and prompt "access denied". This is due to the "UAC remote restrictions" stated in  MS KB article 951916 . To disable this "feature", simple  setting the registry value LocalAccountTokenFilterPolicy to 1 as follows: Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Value: LocalAccountTokenFilterPolicy Data: 1 (to disable, 0 enables filtering) Type: REG_DWORD (32-bit) ref:  http://helgeklein.com/blog/2011/08/access-denied-trying-to-connect-to-administrative-shares-on-windows-7/

IE9 - Group Policy Perference

Using Internet Explorer Maintenance Extension Ref: http://technet.microsoft.com/en-us/library/gg699413.aspx Choosing Preference mode By default, IEM is in Normal mode. In Normal mode, you can configure IEM settings so that they are refreshed on users' computers on a periodic basis (or each time the users log in). However, users can temporarily change these settings between the times scheduled for their setting refresh. For this reason, these settings in Normal mode behave as "pseudo-policies." In Preference mode, you can configure IEM settings, but allow users to change these settings later by using the Internet Explorer 9 user interface. Preference mode also exposes several additional advanced settings that you can configure. Unlike the pseudo-policies you configure in Normal mode, the settings you configure in Preference mode are true preferences. In this regard, IEM settings work similarly to Internet Explorer Settings items in Group Policy preferences.

Virtualizing existing domain controllers

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1006996

VMware network adapter type

VMXNET 3 is preferable. It performs better and gives higher throughput. Ref:  http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1001805

Services.msc gives you a weird layout

The services.msc display a weird layout in the extended tab. The header expands its room downward. Type the following commands to fix it. regsvr32 jscript.dll regsvr32 vbscript.dll Ref:  http://www.sevenforums.com/general-discussion/41036-services-only-shows-big-blue-blob-extended-tab.html

Enable PING Replies from Win2k8

Enable: netsh firewall set icmpsetting 8 Disable: netsh firewall set icmpsetting 8 disable ref:  http://www.petri.co.il/enable-ping-windows-2008-server.htm

Cisco IOS: Command Line Interface Hotkeys

For many editing functions, the IOS CLI editor provides hot keys. The following table lists some editing shortcuts that are available. Table 3 - Summary Of Hot Keys Delete - Removes one character to the right of the cursor. Backspace - Removes one character to the left of the cursor. TAB -  Finishes a partial command. Ctrl-A -  Moves the cursor to the beginning of the current line. Ctrl-R -  Redisplays a line. Ctrl-U - E rases a line. Ctrl-W -  Erases a word. Ctrl-Z -  Ends configuration mode and returns to the EXEC. Up Arrow - Allows user to scroll forward through former commands. Down Arrow - Allows user to scroll backward through former commands. Excerpt from:   http://www.cisco.com/warp/cpropub/45/tutorial.htm

Cisco IOS configuration: complete replace running config

use "configure replace nvram:startup-config" to completely overwrite running-config, instead of merging. ref:  Overwrite Running Config Rather Than Merge On A Cisco Router ref:  Use 'configure replace' Instead of 'copy start run'

Cisco IOS configuration: "no remark"

The "no remark" command will left an empty remark command in the config file. Use "default remark" to delete it without trail.

A Group Policy object is not applied to a computer that is a member of a nested group on a Windows Server 2008-based domain controller

As subject. This is a bug. Microsoft releases a temporary bug fix.  http://support.microsoft.com/kb/971438

ABR (Activation Backup and Restore)

SQL Cluster in VMware vShpere 4

VMware ESX 4 Update 1SQL Server 2008 slipstreamed with SP1 Windows Server 2008 R2 You will need to use E1000 network adapters (as the drivers are included in windows), uninstall VMware tools, install SQL Server 2008 in clustered mode, then reinstall vmware tools. Something in VMware tools seems to be causing the problem. quoted from Failover Cluster Install on Server 2008 R2 (RC) Installation of Microsoft SQL Server 2005 or 2008 fails on virtual machines running Windows Server 2008 R2 that are configured in a Microsoft Cluster http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=1021946&sliceId=1&docTypeID=DT_KB_1_1&dialogID=153689463&stateId=0%200%20153687790 Microsoft Cluster Service (MSCS) support on ESX http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1004617 Using VMware Converter to convert Microsoft Cluster (MSCS) nodes to virtual machines http://kb.vmw...

The Net Logon service on Windows Server 2008 and on Windows Server 2008 R2 domain controllers does not allow the use of older cryptography algorithms that are compatible with Windows NT 4.0 by default

Environment Variables in Windows Vista and Windows 7

Crystal Report for VS2010

Outlook 2003 - Reply with Attachments

1. Go to Tools > Macros > Visual Basic Editor 2. Create a new Module 3. Paste the following code: Const TemporaryFolder = 2 Private Function GetCurrentMailItem ( ) As Outlook.MailItem      Dim myOlApp As Outlook.Application      Set myOlApp = CreateObject ( "Outlook.Application" )      Select Case TypeName ( myOlApp.ActiveWindow )      ' Selection From Inbox Explorer         Case "Explorer"              Set GetCurrentMailItem = myOlApp.ActiveExplorer.Selection.Item ( 1 )      ' Selection by opening Email Window         Case "Inspector"              Set GetCurrentMailItem = myOlApp.ActiveInspector.CurrentItem          Case Else      End Select      'If Not TypeName(GetCurrentItem) = "MailItem" Then     ...

看完波斯王子(Prince of Persia: The Sands of Time) 的後感

按一下匕首上的制就能回到過去, 發生的事沒發生過, 但你可否知道每發生的一件事, 不論是痛苦或開心, 都是不斷幫助你成長, 便得更堅強, 更忍耐, 更成熟. 給多個機會再來過, 你又可保證你一定否不回再出錯, 甚至再面對生離死別嗎? 只有神能。